<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
DSA is deprecated, so use RSA if you're making a new key for
yourself.<br>
<br>
Yes, PuTTY will work fine, but it doesn't transfer files. It does
come with a command-line SCP program if you got the PuTTY suite
instead of just putty.exe. This is why I recommended WinSCP, as
it's another drag-n-drop program, and it works over the SSH port,
not Mikrotik's custom and perpetually-exploitable Winbox protocol.<br>
<br>
Good luck!<br>
<br>
--Bart<br>
<br>
<br>
<div class="moz-cite-prefix">On 11/3/2019 12:53 PM, Ric Merry wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CA+obRmbjaV_xtm9PgNy=HVVQ5ECvacPrDRPyeDUdXZNWVoTVQw@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div dir="ltr">Thanks Bart.
<div>I'm doing my homework on these things rather than just
asking the questions. (that's a good thing for all of us)</div>
<div>I plan on using the drag and drop method, I have PuTTY
from work with Pi-Star, is that a recommended SSH program?
<div>The majority of the files I see are using rsa versus
dsa encryption. I researched the difference but I'm not
sure what's best in my case as a client or if it really
makes a difference.</div>
</div>
<div><br>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Sun, Nov 3, 2019 at 9:55
AM Bart Kus <<a href="mailto:me@bartk.us"
moz-do-not-send="true">me@bartk.us</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex">
<div bgcolor="#FFFFFF"> Most of the settings are not bound
to your account, they're bound to the modem itself.
Creating a new account should be as simple as:<br>
<br>
<tt>/user add group=full name=<NAME>
password=<PASSWORD></tt><br>
<br>
If you want to add SSH key-authentication to the account,
you'll need to put the key file on the modem first, via<br>
<br>
<tt>/tool fetch url=<a
href="https://some.website/your.key" target="_blank"
moz-do-not-send="true">"https://some.website/your.key"</a><br>
<br>
</tt>or use <a href="https://winscp.net/eng/download.php"
target="_blank" moz-do-not-send="true">scp</a> to copy
it, or use winbox to drag and drop the file into the
modem's "File" section.<br>
<br>
Once the file is there, you associate it with your account
like so:<br>
<br>
<tt>/user ssh-keys import user=<NAME>
public-key-file=<KEY_FILENAME></tt><br>
<br>
When your account has a key authentication method like
this, password authentication for SSH is disabled.
However, you can override that and preserve password auth
by setting:<br>
<br>
<tt>/ip ssh set always-allow-password-login=yes</tt><br>
<br>
Once your new account is verified to work, you can erase
the admin account:<br>
<br>
<tt>/user remove admin</tt><br>
<br>
--Bart<br>
<br>
<br>
<div>On 11/2/2019 9:08 PM, Ric Merry wrote:<br>
</div>
<blockquote type="cite">
<div dir="auto">Is there a simple way to duplicate my
account/credentials with current settings but a
different user name.
<div dir="auto">I don't want to start over at step 1.</div>
<div dir="auto">Thanks</div>
</div>
</blockquote>
<br>
</div>
</blockquote>
</div>
</div>
</blockquote>
<br>
</body>
</html>